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Amendments to the Specification : 

Please replace the paragraph beginning on page 5, line 14, with the following 
rewritten paragraph: 

FIG. 8 is a flowchart showing an example of a procedure for d e ciding determining a 
volume of data stored in a RAM. 

Please replace the paragraph beginning on page 10, line 23, with the following 
rewritten paragraph: 

Next, the storage/deletion controller 110 calculates the size of that part of the data of 
the encrypted job data that is stored in the RAM 14 (SI 2). This calculation calculates storage 
size using space in the RAM 14 obtained by the memory monitoring module 116 and a 
random number generated by the random number generator 114. Th e way of thinking is that 
theThe storage size is -mav be made larger when there is more free space in the RAM 14 and 
adjustments are made using random numbers so that the relationship between space and 
storage size does not become fixed. This may be, for example, processing where a prescribed 
proportion of the free space in the RAM 14 is decided upon as a storage size reference value, 
with a storage size then being obtained by subjecting this reference value to adjustment using 
normal distribution random numbers generated by the random number generator 114. 
Insufficient work memory during storage processing can therefore be avoided by considering 
free space in the RAM 14 when deciding storage size. Further, the rules for distribution can 
be made more difficult to understand by changing the storage size using this random number 
and improvement in security can be anticipated. 

Please replace the paragraph beginning on page 17, line 3, with the following 
rewritten paragraph: 

Further, it is also possible to d e cid e determine storage size taking into consideration 
conditions other than the space in the RAM. This example is shown in FIG. 8. In this 
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example, in addition to acquiring the amount of space left in RAM (S60), information such as 
whether or not there is a job waiting (S62), overall processing load on the image- forming 
device (S64), and level of job data confidentiality (S66) is also acquired, with size for storing 
to the RAM 14 then being decid e d determined t aking this information as parameters (S68). 
Th e fundam e ntal way of thinking behind this calculation is as follows. 
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